Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: qSyr27h5vbisS/0ARml9xGfPOX5clID/URifkcMXOdI=
Subject key identifier: AD:38:A0:66:F7:A5:A7:3B:C8:31:6F:BE:39:B3:9C:B3:4B:35:13:05
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 0198820C411B0EE5B523FFBE7313B989B7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 01:01:37 +0000
Manifest this update: Thu 07 Aug 2025 01:01:37 +0000
Manifest next update: Fri 08 Aug 2025 01:01:37 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: hi9xnwGPVIazwOyY+pqKJtkm9y3l0jbRyXR8GW8EOjY=)
2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:41:1b:0e:e5:b5:23:ff:be:73:13:b9:89:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Aug 7 01:01:37 2025 GMT
Not After : Aug 8 01:01:37 2025 GMT
Subject: CN=ad38a066f7a5a73bc8316fbe39b39cb34b351305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:50:04:b8:4d:99:80:04:31:2f:0d:0d:4a:
c1:a6:f4:22:cf:24:9b:ac:e8:0c:8f:39:9a:48:12:
7b:4f:b6:05:db:c6:11:33:79:3f:2d:b5:b2:fc:46:
09:95:fe:dc:12:39:fd:38:64:2a:85:51:b9:cb:1e:
18:ad:12:60:31:3a:08:57:a0:4a:ec:a8:c1:fa:ca:
ba:31:50:21:be:5e:6b:9d:9b:d8:29:20:fb:92:a8:
0a:e6:4f:6d:07:df:e1:c3:b7:35:bf:73:cc:51:35:
34:8c:a7:92:6e:30:9d:59:81:62:5c:18:a3:52:e8:
38:af:7b:bc:78:d6:bf:b1:2d:33:66:76:f3:ed:b8:
79:dd:ac:7f:af:28:46:49:bc:8b:5d:23:5f:86:2a:
2f:c9:b8:6c:49:fa:63:5e:e2:9c:33:bc:43:30:76:
8e:06:85:d6:10:49:aa:30:c5:f3:e4:d7:bb:15:80:
03:ca:48:f3:b4:d1:a6:de:8b:69:af:44:2e:b1:ad:
ab:b0:bb:e8:0a:63:38:af:07:ac:0f:49:eb:8f:6b:
94:04:ac:99:9c:95:7f:aa:d8:ef:e8:4e:4e:e4:4b:
39:ee:d4:cf:f1:6e:c2:f5:03:ba:d3:cf:ed:0e:51:
4b:8b:ab:f6:3f:75:fc:93:ce:b5:4c:d7:91:04:e9:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:38:A0:66:F7:A5:A7:3B:C8:31:6F:BE:39:B3:9C:B3:4B:35:13:05
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:54:06:e3:77:da:07:02:25:55:29:39:ca:1e:64:d3:91:37:
fe:0a:e0:7b:e6:5e:f3:0d:bc:00:98:7e:b6:d7:fb:e8:16:3f:
32:e5:50:0e:c9:eb:bc:20:b3:db:e3:85:6c:6f:f4:f2:26:13:
de:cf:ff:06:31:8e:a1:ab:7e:52:a7:05:37:c8:a7:14:e1:ba:
2b:fe:6c:16:c7:00:1a:46:24:b9:78:34:d3:bc:ec:e7:04:94:
51:fd:70:e0:1f:df:23:b9:b4:00:2c:9a:8a:61:d2:2a:3f:61:
7d:90:61:99:38:57:57:62:c9:8b:6c:8f:69:23:08:fc:0b:88:
e6:8a:b9:e9:1d:be:26:a1:db:a5:3e:e7:9a:d2:0b:96:78:05:
de:cd:a0:ba:85:4d:a8:04:93:ea:4f:85:0f:85:d1:ea:19:b6:
2e:86:02:5b:8b:8f:d7:aa:84:b6:9e:5f:03:06:c5:eb:68:f0:
ec:ca:46:28:19:d7:06:df:e8:9a:28:95:9c:15:cb:46:f5:21:
6a:2d:fa:40:32:cd:ad:b7:ed:c4:e4:3d:ae:06:61:f6:6c:13:
78:78:fb:6a:6f:71:69:33:f1:52:6c:8b:55:13:99:ea:b2:27:
e8:aa:f5:f3:1f:7e:0e:35:9e:7c:95:09:9c:ba:0e:e3:bb:08:
f4:0e:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:17:47 2025 by rpki-client